Static task
static1
Behavioral task
behavioral1
Sample
7070744baa3da6eecceb1ad734a16db0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7070744baa3da6eecceb1ad734a16db0.exe
Resource
win10v2004-20231215-en
General
-
Target
7070744baa3da6eecceb1ad734a16db0
-
Size
47KB
-
MD5
7070744baa3da6eecceb1ad734a16db0
-
SHA1
e4f88bc8af12f8ddf0a1b11d8bb52eb4c4a0efe9
-
SHA256
e875e75e8fad99f0c0cd2021be6233f57bd10a3fc39ad922f5f164667bd62434
-
SHA512
0304bdbda4ccad2a939f35bbf44b4ebbc6ccbf00b95860c918bcb3d937de5627256c7f342afa9c9e2e5b3347c949f62ca7f3697071b55319f721a73da722248c
-
SSDEEP
768:Pj1yjmII1X+pa1c9q8FkxoLjSqAYkP9N8PGRXm4Rf5FLlg4ZzX41Z2Wy/jY0OS2s:PM21upaU1k+j4RzRhFe0CZ2WDM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7070744baa3da6eecceb1ad734a16db0
Files
-
7070744baa3da6eecceb1ad734a16db0.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 661KB - Virtual size: 660KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 181KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 3B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19.3MB - Virtual size: 19.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ